Privacy Notice

This privacy policy is intended to inform you as a user about the collection of personal data on this website. We therefore aim to provide a transparent information regarding the protection of your data. Should there be any uncertainties, questions, or clarifications needed, please do not hesitate to contact us.

RESPONSIBLE PARTY

The responsible entity in accordance with the General Data Protection Regulation (GDPR) (Art. 4 (7) GDPR) and other national data protection laws and regulations is:

Lenka Wittmann

Schillerstrasse 27a

15741 Bestensee

Phone: +49 (0)1577 6410819

Email: info@inner-touch.com

Full imprint: https://inner-touch.com/contact/

These contact details are relevant for all questions of data protection nature regarding this website as well as for all data protection-related claims from your side.

COLLECTION AND STORAGE OF PERSONAL DATA WHEN VISITING OUR WEBSITE

Below we inform you about the data protection relevant processes that occur when accessing our website.

1. Log files

With each visit to our website, we automatically collect data and information from the computer system you use to access the website.

The following data is collected:

(1) Information about your browser type and version

(2) Information about your operating system

(3) Date and time of access

(4) Websites from which your system accesses our website

(5) Websites accessed by your system through our website

(6) Your IP addres

The log files are anonymized or deleted at the earliest opportunity. This typically occurs no later than seven (7) days afterward.

The processing of data is carried out for the purpose of delivering the content of our website, ensuring the functionality of our information technology systems, and optimizing our website. Thus, processing is necessary to safeguard our legitimate interests pursuant to Art. 6 (1) lit. f GDPR, i.e., the proper conduct of our business activities.

Since the collection of data for the provision of our website and the storage of data in log files for the operation of our website are strictly necessary, there is no possibility for you to object.

2. Cookies

We use so-called “cookies” on our website. These are small files that your browser automatically creates and that are stored on your computer system when you visit our site. Cookies do not harm your computer system, nor do they contain viruses, trojans, or other malware.

We use cookies to improve our website, for example, to make it more user-friendly and to tailor it to user interests.

The following data is stored and transmitted in cookies:

(1) Language settings

(2) Login information

(3) Frequency of page views

(4) Use of website functions

The data collected in this way is pseudonymized through technical measures.

The data processed by cookies is partly necessary for the stated purposes to safeguard our legitimate interests (conduct of our business activities) pursuant to Art. 6 (1) S. 1 lit. f GDPR (analysis and technical necessity for use). To the extent that cookies are used for marketing purposes, they are collected, processed, and shared based on your consent pursuant to § 25 (1) S. 1 TTDSG, Art. 6 (1) S. 1 lit. a GDPR. You can prevent further processing of your data based on consent at any time by adjusting the cookie settings for our website accordingly. Additionally, you can revoke your consent for data already collected and processed at any time.

Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer system or to always prompt you before a new cookie is created. However, disabling cookies entirely may result in you not being able to use all features of our website.

3. Website analysis

We use third-party analytics tools to evaluate the usage of the site and its functions. This includes “Google Analytics,” which is a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

This service allows us to create pseudonymized usage profiles and use cookies (see B. 2.). The information generated by the cookie about your use of this website, such as

(1) Browser type/version

(2) Operating system used

(3) Referrer URL (previously visited page),

(4) Time and country of server request

is transmitted to a Google Inc. server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide further services related to website use and internet use for market research and tailor-made design of these web pages. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data from Google. IP addresses are anonymized so that assignment is not possible.

You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent Google Analytics from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data on future visits to this website. The opt-out cookie applies only to this browser and only to our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

The issue at this point: The opt-out solution does not work for mobile devices. Therefore, it is necessary to provide a corresponding button with which the user can opt out of tracking by clicking. This is done via a script or plugin.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=en).

The cookies are stored for a period of 14 months.

The use of Google Analytics is for the purpose of optimizing and evaluating our offering. The processing of the data mentioned is necessary to safeguard our legitimate interests pursuant to Art. 6 (1) lit. f GDPR, i.e., the conduct of our business activities.

You can prevent data collection through the following link (Opt-Out): http://www.google.com/ads/preferences.

CONTACT

You can electronically contact us via a form on the website or by email. In this case, the data you enter into the form or send to us by email is transmitted to us and stored by us.

This includes:

(1) Your name

(2) Date of contact

(3) Your email address

(4) Telephone number

(5) Any other data you provide

If you send us an email and are interested in our offers, the legal basis for data processing is Art. 6 (1) lit. b GDPR, otherwise Art. 6 (1) lit. f GDPR (Legitimate interest: Proper performance of our business activities).

We only use the data to process and answer your request. The data is deleted as soon as it is no longer required for the purpose of its collection. This is the case when the respective conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified.

You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

NEWSLETTER

We offer a newsletter service to inform recipients about our services (newsletter subscription). To receive this newsletter, you must sign up for it on our website. The data you enter during the registration process will be transmitted to us and used solely for the purpose of sending the newsletter.

This includes:

(1) The email address provided by you
(2) Your name
(3) The IP address of the computer system you are using
(4) Date and time of registration

We require your email address to deliver the newsletters to you. The other information is necessary to prevent misuse of our service as well as the provided email address.

The voluntary information is used to provide you with more targeted information about our offerings. However, this information is not necessary for the newsletter subscription.

We use Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) for sending our newsletters. This enables us to directly engage with subscribers. Additionally, we analyze your usage behavior to optimize our offerings.

For this purpose, we provide Mailchimp with the following personal data:

(1) Email address
(2) First name
(3) Last name
(4) Phone number

Mailchimp is the recipient of your personal data and acts as a data processor for us regarding the newsletter dispatch. The processing of the data specified under this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, we will not send any newsletters to you.

Additionally, Mailchimp collects the following personal data through the use of cookies and other tracking methods: Information about your device (IP address, device information, operating system, browser ID, information about the application you use to read your emails, and further information about hardware and internet connection).

Furthermore, usage data such as the date and time you opened the email/campaign and browser activities (e.g., which emails/websites were opened) are collected. Mailchimp requires this data to ensure the security and reliability of its systems, compliance with the terms of use, and prevention of abuse. This corresponds to Mailchimp’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the performance of the contract (pursuant to Art. 6 para. 1 lit. b GDPR).

Performance data is also evaluated by Mailchimp, such as email delivery statistics and other communication data. This information is used to create usage and performance statistics of the services.

Additionally, Mailchimp collects information about you from other sources. Personal data is collected from social media and other third-party data providers to an unspecified extent and duration. We have no control over this process.

Further information on options for objection and removal regarding Mailchimp can be found at: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts

The legal basis for these processing activities is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent to the processing of your personal data at any time. A corresponding link is provided in all communications. Revocation can also be made through the contact information provided. The revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Your data will be processed for as long as appropriate consent exists. Apart from that, they will be deleted after the termination of the contract between us and Mailchimp, unless legal requirements necessitate further storage.

Mailchimp has implemented compliance measures for international data transfers. These apply to all global activities where Mailchimp processes personal data of natural persons in the EU. These measures are based on the EU-US Data Privacy Framework. Further information can be found at: https://mailchimp.com/legal/data-processing-addendum/

We analyze the reading behavior of our newsletter mailings and can track the opening rate and click rate. This behavior can be attributed to individual newsletter recipients. This is done with the purpose of making our newsletter more interesting and adapting it to the needs of our subscribers.

Before submitting the registration for receiving our newsletter, your consent is obtained, and you are informed about this privacy policy (Art. 6 para. 1 lit. a GDPR).

Termination of the subscription and thus the possibility of objection and removal of data processing is possible at any time. For this purpose, there is a corresponding link to unsubscribe in every email of our newsletter.

OUR PRESENCE ON SOCIAL MEDIA

We are active on the social networks of Facebook, Instagram, YouTube, Twitter, and LinkedIn to communicate with our customers and prospects and to inform them about our activities and offers. From a data protection perspective, both the respective network and we are jointly responsible for processing your personal data, even if it is stored exclusively by the respective social network. Therefore, we will inform you below about the data processing processes related to our presence on social networks.

If you use our respective online presence on one or more of the social networks we use, please note that your data may be processed outside the European Union / European Economic Area. However, all of the networks we use have committed to complying with EU data protection standards within the EU-US Privacy Framework.

The social networks we use also regularly process your data for market research and advertising purposes. Based on your usage behavior and resulting interests, the networks can create usage profiles, which may be used, for example, to display advertisements matching your potential interests both within and outside the networks. For these purposes, cookies that store your usage behavior and interests, as well as possibly the devices you use, are regularly stored on your computer.

The processing of your personal data related to our presence on social networks is based on our legitimate interests in effective information and communication with you (Art. 6 para. 1 lit. f GDPR). If you have given your consent to the data processing described above to the respective social network, the legal basis for processing is your consent pursuant to Art. 6 para. 1 lit. a, Art. 7 GDPR.

For a detailed presentation of the respective processing and options for objection (opt-out), please visit the internet presences of the respective social networks. For asserting your rights and inquiries, we also refer you to the respective social networks, where you can exercise your rights most effectively. Only the social networks have access to your data and can therefore take appropriate measures and provide information directly.

GOOGLE FONTS

We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.

You do not need to sign up or provide a password to use Google Fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. Google collects and securely stores data on the usage of CSS (Cascading Style Sheets) and the fonts used. We will take a detailed look at how data storage works.

The processing of your personal data related to Google Fonts is based on our legitimate interests in providing a good user experience on our website (Art. 6 para. 1 lit. f GDPR).

GOOGLE ADS

We use Google Ads, an online advertising program provided by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms into Google. Additionally, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests). We can quantitatively evaluate this data by analyzing, for example, which search terms led to the display of our advertisements and how many clicks resulted in corresponding advertisements.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

The data transfer to the USA is based on the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

PROCESSING IN THIRD COUNTRIES IN GENERAL

Unless otherwise stated above, the processing of your personal data in countries outside the European Union (EU) or the European Economic Area (EEA) is based exclusively on the legal requirements according to Art. 44 GDPR. In this case, this is exclusively based either on an adequacy decision of the European Commission (Art. 45 GDPR) and/or on the basis of suitable safeguards (Art. 46 GDPR).

GENERAL STORAGE PERIOD

In general, personal data is only stored for as long as it is necessary to fulfill the purpose of data collection or to comply with the respective legal retention period. After the purpose has ceased to exist or the deadline has expired, the data will be deleted.

DATA SUBJECT RIGHTS

As a user, you have the following rights concerning your personal data:

(1) Right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g., the processing purposes, the recipients, the planned duration of storage, or the criteria for determining the duration.

(2) Right to rectification (Art. 16 GDPR)

You have the right to demand the correction of incorrect personal data concerning you. You also have the right to demand the completion of incomplete personal data, taking into account the purposes of processing.

(3) Right to erasure (Art. 17 GDPR)

You have the right to demand the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist, in particular, if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.

(4) Right to restriction of processing (Art. 18 GDPR)

You have the right to demand the restriction of the processing of your personal data if one of the conditions of Art. 18 (1) GDPR is met. This includes, in particular, the period during which we are checking your request for rectification or deletion.

(5) Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format and to transmit this data to another controller without hindrance from us if the conditions of Art. 20 (1) GDPR are met.

(6) Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

(7) Right to withdraw consent under data protection law (Art. 7 (3) GDPR)

You have the right to revoke your consent to the processing of personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

(8) Right to file a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

To exercise your rights, you can contact us at any time using the contact details provided above.

DATA SECURITY

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third-party access. These measures are adjusted according to the current state of the art.

CHANGES TO THE PRIVACY POLICY

We reserve the right to change this privacy policy from time to time. The current version can be accessed directly on our website. Insofar as your consent is required or parts of the privacy policy regulate the contractual relationship with you, the changes will only be made with your consent.